[RESOLVED] passing vars in the URL

[jasonyoung]

besides the inherent potential security risk by passing variables in the URL, what is the general consensus on this practice?

is it viewed as lazy?
does it have strong points?
does it have weak points?

I only ask because it seems like an easy way to get the vars between pages and I'm embarking on a 30+ page 'interview' like script, building up to a sql insert after posting the last page.

Just looking for some advice from you PHP Gods!

thanks.

[Weedpacket]

There are limits on the size of a querystring; there is no guarantee that the contents of the URL won't be tampered with before the submission is made; persisting data across page requests is a task better handled by session variables (and yes, you can have the session ID in the URL); and it does kind of sail a bit close to the wind when it comes to being what a URL is for. I'm trying to thing of some strong points ... um, they may be a bit simpler than session variables in that you don't have to check your configuration and you don't have to call session_start().

[jasonyoung]

Thanks Weed.